Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/06—Authentication
• • G—PHYSICS
  • G02—OPTICS
  • G02B—OPTICAL ELEMENTS, SYSTEMS OR APPARATUS
  • G02B27/00—Optical systems or apparatus not provided for by any of the groups G02B1/00 - G02B26/00, G02B30/00
  • G02B27/01—Head-up displays
  • G02B27/017—Head mounted
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
  • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
  • G06F16/22—Indexing; Data structures therefor; Storage structures
  • G06F16/2228—Indexing structures
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
  • G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
  • G06F16/29—Geographical information databases
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
  • G06F16/90—Details of database functions independent of the retrieved data types
  • G06F16/907—Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
  • G06F16/909—Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually using geographical or spatial information, e.g. location
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06T—IMAGE DATA PROCESSING OR GENERATION, IN GENERAL
  • G06T19/00—Manipulating 3D models or images for computer graphics
  • G06T19/006—Mixed reality
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/01—Protocols
  • H04L67/131—Protocols for games, networked simulations or virtual reality
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/02—Services making use of location information
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/30—Services specially adapted for particular environments, situations or purposes
  • H04W4/33—Services specially adapted for particular environments, situations or purposes for indoor environments, e.g. buildings
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W64/00—Locating users or terminals or network equipment for network management purposes, e.g. mobility management
  • H04W64/003—Locating users or terminals or network equipment for network management purposes, e.g. mobility management locating network equipment
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/60—Context-dependent security
  • H04W12/65—Environment-dependent, e.g. using captured environmental data

Definitions

• An illustrative aspect of the invention provides a system for authorizing secure data transmission.
• the system comprises at least one wearable device comprising a head-mounted display configured to receive and display data to a user wearing the head-mounted display.
• the system further comprises at least one security mechanism associated with each of the at least one wearable device and configured to collect authorization data associated with the user when the user is wearing the head-mounted display.
• the system further comprises a central processor in communication with the at least one wearable device via a network, the central processor being configured to receive the authorization data, determine a level of authorization for the user based at least in part on the authorization data, and transmit to the user secure data commensurate with the level of authorization for the user.
• Another illustrative aspect of the invention provides a method of authorizing the transmission of secure data to a wearable display device worn by a user and associated with at least one security mechanism.
• the method comprises receiving authorization data from one of the set consisting of the wearable display device and the at least one security mechanism.
• the method further comprises determining an authorization level for the user based at least in part on the authorization data.
• the method further comprises transmitting secure data commensurate with the level of authorization for the user to the wearable device.
• Figure 1 is a schematic representation of a system according to an embodiment of the invention.
• Figure 2 is a schematic representation of a system according to an embodiment of the invention.
• Figure 3 is a block diagram illustrating a method according to an embodiment of the invention.
• the system described herein uses augmented reality (AR) to display information to a user on a wearable display device.
• AR augmented reality
• the system uses one or more security features to authenticate the user and display sensitive data while preventing unauthorized users from gaining access to the data.
• a wearable display device (herein after referred to as a head-mounted display device (HMD)) is a display device that a person wears on the head in order to have video information directly displayed in front of their eyes.
• HMD head-mounted display device
• U.S. Patent No. 8,212,859 to Tang et al. (“Tang"), the complete disclosure of which is incorporated herein by reference, describes the construction and function of illustrative HMDs in more detail.
• an HMD may have one or two small CRT, LCD, or OLED displays with magnifying lenses and other associated optical elements.
• the displays and optics are typically embedded in a helmet, glasses, goggles, contacts, or a visor which a user can wear.
• FIG. 1 depicts an exemplary embodiment of a system 100 for displaying sensitive data to an authorized user of a wearable display device 101, or HMD.
• the system includes a wearable display device, or HMD 101, a secure data system 102 that includes one or more secure data processors 103, at least one security feature 104, and a network 108 that communicatively couples the wearable display device 101 and secure data processor 103.
• the system in Figure 1 illustrates only a single instance of each component. It will be appreciated that multiple instances of these components may be used.
• the system may include other devices not depicted in Figure 1.
• HMD 101 may be, for example and without limitation, glasses, goggles, a visor, a helmet, or contact lenses.
• HMD 101 may include a display, a frame, a camera, one or more wireless connections to a data processor, one or more security features, a microphone, and a small speaker.
• HMD 101 may include one or more processors embedded in the frame. The one or more processors may be remote to the wearable device and may communicate with the wearable device wirelessly.
• HMD 101 may transmit and receive data to and from secure data system 102, which may comprise one or more secure data processors 103.
• the one or more secure data processors may be one or more network enabled computers or servers.
• the term network enabled computer and/or device may include, but is not limited to: e.g., any computer device, or communications device including, e.g., a server, a network appliance, a personal computer (PC), a workstation, a mobile device, a phone, a smartphone, a tablet computer, a laptop, a handheld PC, a personal digital assistant (PDA), a thin client, a fat client, an Internet browser, or other device.
• PC personal computer
• PDA personal digital assistant
• HMD 101 may communicate wirelessly with secure data system 102 via network 108.
• Network 108 may be a wireless network, a wired network or any combination of wireless network and wired network.
• Network 108 may be a wireless LAN, a Global System for Mobile Communication ("GSM”), a Personal Communication Service (“PCS”), a Personal Area Network (“PAN”), D-AMPS, Wi-Fi, Fixed Wireless Data, IEEE 802.11a, 802.11b, 802.15.1, 802.1 In and 802. l lg or any other wired or wireless network for transmitting and/or receiving a data signal.
• GSM Global System for Mobile Communication
• PCS Personal Communication Service
• PAN Personal Area Network
• D-AMPS D-AMPS
• Wi-Fi Fixed Wireless Data
• IEEE 802.11a, 802.11b, 802.15.1, 802.1 In and 802. l lg or any other wired or wireless network for transmitting and/or receiving a data signal.
• HMD 101 may be configured to use AR technology to display sensitive or proprietary information to the wearer.
• the sensitive data may be wirelessly transmitted to HMD 101 from a remote location, such as the secure data system 102.
• HMD 101 may display the sensitive data to the user using AR technology.
• the systems and methods may be implemented in conjunction with one or more security features 104.
• Security feature 104 may be physically coupled to wearable device 101.
• Security feature 104 may be integrated with wearable device 101.
• Security feature 104 may be communicatively coupled to wearable device 101, network 108, and/or secure data system 102 to prevent unauthorized users from gaining access to the sensitive information via the HMD.
• Figure 2 depicts an exemplary embodiment of an HMD that has been equipped with one or more security features 104 to prevent an unauthorized user from viewing sensitive data using the HMD.
• Device 202 and device 204 may be the same device, equipped with one or more security features.
• Unauthorized device 202 denotes the state when an unauthorized user wears device 202.
• Authorized device 204 denotes the state when an authorized user wears device 204.
• the unauthorized user wearing device 202 would only be able to view data "12345" in his field of vision.
• an authorized user wearing device 204 would be able to see "12345 546546516" displayed in his field of vision.
• HMD 101 security feature 104
• secure data system 102 may use one or more forms of authentication to verify the user's authenticity.
• security feature 104 may comprise a microphone connected to HMD 101. The user may speak a password into the microphone. HMD 101 may transmit the spoken password to the secure data system 102 (via network 108), which may use voice recognition software to authenticate the user.
• Secure data system 102 may include a database of voice samples from authorized users. Secure data processor 103 may compare the received voice sample from HMD 101 and compare it to the one or more stored voice samples to determine if the user of HMD 101 is an authorized user.
• the secure data processor 103 may transmit sensitive data to HMD 101 for display to the authorized user, as shown on device 204 in Figure 2.
• the amount or nature of the sensitive data that is displayed to the user may vary depending on the level of access associated with the user.
• a user of an HMD may be able to view sensitive data on the display of the HMD for as long as the user is wearing the HMD. If an unauthorized user attempts to put an HMD that was previously being used by an authorized user, a signal from security feature 104 of the HMD may tell the secure data system 102 that the HMD is no longer being worn by the authorized user. This signal may be a security break signal that may cause the secure data system 102 to cease transmitting sensitive data to HMD 101 and effectively return the HMD to an unauthorized display state (as shown on device 202 in Figure 2).
• security feature 104 may comprise an accelerometer that is configured to detect sudden changes in the position of the HMD caused by a user "taking off or "putting on” the HMD.
• HMD 101 and/or security feature 104 may transmit one or more security break signals to the secure data system 102.
• the secure data system may require the HMD to be stationary at all times. In this scenario, in response to any motion detected by the accelerometer, a security break signal would be sent to the secure data system.
• the secure data system 102 may require the HMD to be moving at a constant velocity. Any change in the HMD's velocity may be detected by the accelerometer, and a security break signal would be sent to the secure data system, causing the secure data system to cease transmission of the sensitive data to the HMD.
• security feature 104 may comprise one or more heat or temperature sensors. These heat sensors may be positioned to detect body heat emanating from the user of the HMD when the HMD is being worn. Alternatively, security feature 104 may comprise one or more moisture sensors. The heat sensors/temperature sensors/moisture sensors may be configured to send security break signals to the secure data system in response to a detected change in temperature or moisture level, which may correspond to the HMD being taken off or put on.
• security feature 104 may comprise one or more scanning devices that are configured to frequently scan the user's eye or eyes. Each authorized user may have a unique biometric signature that may have been previously stored with the secure data system 102. The scanning device may periodically send a signal to the secure data system that includes the most recent scan of the user's eye or eyes. Secure data system 102 may compare the scanned information to the stored biometric signatures to verify the identity or authenticity of the user. If the received scan is not authenticated, secure data system 102 may immediately cease transmitting sensitive data to the HMD.
• Security feature 104 may be configured to detect and/or monitor other biometric signatures, such as a heartbeat or a live DNA scan.
• security feature 104 may comprise one or more scanners that are configured to detect digital signatures.
• An authorized user may have been equipped with one or more security tags, such as a quick reference (Q ) code, RFID tag, proximity badge, or a chip embedded on the user.
• the one or more security tags may be worn on the user's clothing, jewelry, or physically embedded on their person.
• the security tags may broadcast digital signals (such as an RFID signal), or the security tags may be passive devices.
• Security feature 104 may be configured to detect the signals from the security tags, or to scan the user for the security tag.
• the HMD may transmit the detected signal or signals to secure data system 102, which may compare them to known identifiers associated with authorized users.
• secure data system 102 may cease transmitting sensitive data to the HMD. Additionally or alternatively, if the HMD does not detect a digital signal or security feature, the HMD may transmit a security break signal to secure data system 102, and the secure data system may cease transmission of sensitive data to the HMD in response.
• Security feature 104 and/or HMD 101 may be configured to physically connect to one or more security tags that are worn by the user.
• Fig. 3 is a flowchart illustrating the functionality of a method for providing a secure data display on a wearable device.
• This exemplary method 300 may be provided by way of example, as there are a variety of ways to carry out the method.
• the method 300 shown in Fig. 3 can be executed or otherwise performed by one or a combination of various systems.
• the method 300 is described below may be carried out by the systems and networks shown in Figs. 1 and 2, by way of example, and various elements of the systems and networks are referenced in explaining the example method of Fig. 3.
• Each block shown in Fig. 3 represents one or more processes, methods or subroutines carried out in exemplary method 300. Referring to Fig. 3, exemplary method 300 may begin at block 302.
• the secure data system receives a first signal from a wearable device.
• the first signal may be from a security feature associated with the wearable device.
• the first signal may be an authorization signal.
• the secure data system may analyze the first signal to determine whether the user of the wearable device is an authorized user.
• the first signal may be a voice sample.
• the secure data system may compare the voice sample to one or more stored voice samples from authorized users in order to determine whether the received voice sample is associated with an authorized user.
• the first signal may be a retinal scan.
• the secure data system may compare the retinal scan with one or more stored retinal scans from authorized users.
• the first signal may be a spoken password.
• the secure data system may compare the spoken password with one or more stored passwords associated with authorized users.
• the first signal may be a DNA scan.
• the secure data system may compare the DNA scan with one or more stored DNA samples associated with authorized users. If the secure data system determines that the user associated with the wearable device is authorized, method 300 may proceed to block 306. If the secure data system determines that the user associated with the wearable device is not an authorized user, method 300 may proceed to block 308.
• secure data system may transmit secured data to the wearable device for display in the field of vision of the user of the wearable device.
• Secure data system may also transmit unsecured data.
• the amount and content of the secured data that is transmitted to the wearable device may depend on a level of security clearance associated with the authorized user.
• the wearable device may be equipped with AR technology, allowing the user to view the secured data in his field of vision.
• the secure data system may transmit unsecured data to the wearable device. In other embodiments, the secure data system may not transmit any data to the wearable device if the user was not authorized in step 304.
• the secure data system may receive a second signal from the wearable device.
• the second signal may be generated by the one or more security features associated with the wearable device.
• the second signal may be similar to the signal received in step 302.
• the second signal may be generated by an accelerometer associated with the wearable device.
• the second signal may indicate that the wearable device has been suddenly moved.
• the second signal may be generated by a temperature sensor associated with the wearable device.
• the second signal may indicate a sudden change in temperature.
• secure data system may analyze the second signal to determine whether the authorized user is still wearing the wearable device. For example, if the second signal is generated by an accelerometer, the secure data system may have stored a maximum acceleration threshold and compare the second signal to the stored threshold.
• the secure data system may cease transmission of the secured data. If the secure data system determines that the authorized user is no longer wearing the wearable device, method 300 may proceed to block 308, where secure data system may cease transmission of any data to the wearable device (or only transmit unsecured data). If the secure data system determines that the authorized user is still wearing the wearable device, method 300 may proceed to block 314, where secure data system may continue transmitting secured data and unsecured data to the wearable device.

Landscapes

• Engineering & Computer Science (AREA)
• Theoretical Computer Science (AREA)
• Physics & Mathematics (AREA)
• Signal Processing (AREA)
• Computer Networks & Wireless Communication (AREA)
• Databases & Information Systems (AREA)
• General Engineering & Computer Science (AREA)
• General Physics & Mathematics (AREA)
• Data Mining & Analysis (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Software Systems (AREA)
• Remote Sensing (AREA)
• Computer Graphics (AREA)
• Computing Systems (AREA)
• Optics & Photonics (AREA)
• Library & Information Science (AREA)
• User Interface Of Digital Computer (AREA)
• Processing Or Creating Images (AREA)
• Controls And Circuits For Display Device (AREA)
• Image Analysis (AREA)

Applications Claiming Priority (4)

Publications (1)

Family

ID=51525483

Family Applications (3)

Family Applications Before (1)

Family Applications After (1)

Country Status (3)

Families Citing this family (64)

Family Cites Families (40)

• 2014
  • 2014-03-14 WO PCT/US2014/027283 patent/WO2014152386A1/en active Application Filing
  • 2014-03-14 EP EP14768944.2A patent/EP2973432A4/de not_active Withdrawn
  • 2014-03-14 US US14/210,601 patent/US9865087B2/en active Active
  • 2014-03-14 EP EP14769742.9A patent/EP2972561A1/de not_active Withdrawn
  • 2014-03-14 WO PCT/US2014/027333 patent/WO2014152430A1/en active Application Filing
  • 2014-03-14 WO PCT/US2014/027396 patent/WO2014152489A1/en active Application Filing
  • 2014-03-14 US US14/210,730 patent/US20140282911A1/en not_active Abandoned
  • 2014-03-14 EP EP14770908.3A patent/EP2972089A4/de not_active Withdrawn
  • 2014-03-14 US US14/210,650 patent/US9996551B2/en active Active

Also Published As

Similar Documents

Legal Events